agisoft-delighter

maintainer dobedobedo · 0 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads a source tarball from a non-whitelisted but plausibly official Amazon S3 host used by Agisoft; the content is a legitimate build artifact, not an executable payload, and the build process is transparent and self-contained.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a source tarball from a non-whitelisted but plausibly official Amazon S3 host used by Agisoft; the content is a legitimate build artifact, not an executable payload, and the build process is transparent and self-contained.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:14 source=("https://s3-eu-west-1.amazonaws.com/download.agisoft.com/${_pkgname}_${pkgver//./_}_amd64.tar.gz"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Yu-Hsuan Tu <dobe0331 at gmail dot com>
2_pkgname=delighter
3pkgname=agisoft-${_pkgname}
4pkgver=2.3.1
5pkgrel=3
6pkgdesc="A free stand-alone tool designed to remove shadows from model textures"
7arch=('x86_64')
8url="https://www.agisoft.com/"
9license=('custom:Agisoft EULA' 'custom')
10makedepends=('imagemagick')
11provides=('agisoft-delighter')
12options=('!strip')
13install=${pkgname}.install
14source=("https://s3-eu-west-1.amazonaws.com/download.agisoft.com/${_pkgname}_${pkgver//./_}_amd64.tar.gz"
15 "agisoft-delighter-icon-encoded.txt")
16sha256sums=('d14d20e11e44f91698d18a9d6c40cb37502763a5e7e665372b6fa6b73a7e4862'
17 '6cc74a4ac8ec776ebea5eff2383ddaf2520bb0a47f7d2135a62277dbd9206921')
18
19build() {
20 # Create desktop entries
21 echo "[Desktop Entry]
22Type=Application
23Name=Agisoft De-Lighter
24Comment=Remove shadows from model textures
25Exec=agisoft-delighter
26MimeType=application/agisoft.dlz
27Icon=agisoft-delighter
28Terminal=false
29Categories=Science;ImageProcessing" > "$srcdir/agisoft-delighter.desktop"
30
31 # Create Delighter MIME type file
32 echo '<?xml version="1.0" encoding="UTF-8"?>
33<mime-info xmlns="http://www.freedesktop.org/standards/shared-mime-info">
34 <mime-type type="application/agisoft.dlz">
35 <comment>Delighter Projects</comment>
36 <icon name="application-agisoft-dlz"/>
37 <glob-deleteall/>
38 <glob pattern="*.dlz"/>
39 </mime-type>
40</mime-info>' > "$srcdir/${pkgname}-mime.xml"
41
42 # Create 128x128 application icons
43 base64 -d "$srcdir/agisoft-delighter-icon-encoded.txt" > "$srcdir/agisoft-delighter_128.png"
44
45 # Create 128x128 mime icons
46 cp "$srcdir/agisoft-delighter_128.png" "$srcdir/application-agisoft-dlz_128.png"
47
48 # Create icons for other resolutions
49 for _res in 16 32 48 64; do
50 magick "$srcdir/agisoft-delighter_128.png" -resize ${_res}x${_res} "$srcdir/agisoft-delighter_${_res}.png"
51 magick "$srcdir/application-agisoft-dlz_128.png" -resize ${_res}x${_res} "$srcdir/application-agisoft-dlz_${_res}.png"
52 done
53
54 # Create executables for /usr/bin
55 echo "#!/bin/bash
56/opt/agisoft/${_pkgname}/delighter.sh \$@" > "$srcdir/agisoft-delighter"
57}
58
59package() {
60 # Move extracted folder to opt
61 cd "$pkgdir"
62 mkdir -p "opt/agisoft"
63 mv "${srcdir}/${_pkgname}" "${pkgdir}/opt/agisoft/"
64
65 # Install licenses
66 cd opt/agisoft/${_pkgname}
67 install -Dm644 eula.txt "$pkgdir/usr/share/licenses/$pkgname/eula.txt"
68 mv licenses "$pkgdir/usr/share/licenses/$pkgname"
69 rm eula.txt
70
71 # Move desktop entries
72 mkdir -p "${pkgdir}/usr/share/applications/"
73 mv "${srcdir}/agisoft-delighter.desktop" "${pkgdir}/usr/share/applications/"
74
75 # Create MIME type
76 mkdir -p "${pkgdir}/usr/share/mime/packages"
77 mv "${srcdir}/${pkgname}-mime.xml" "${pkgdir}/usr/share/mime/packages"
78
79 # Move icons
80 for _res in 16x16 32x32 48x48 64x64 128x128; do
81 mkdir -p "${pkgdir}/usr/share/icons/hicolor/${_res}/apps/"
82 mkdir -p "${pkgdir}/usr/share/icons/hicolor/${_res}/mimetypes/"
83 mv "$srcdir/agisoft-delighter_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/apps/agisoft-delighter.png"
84 mv "$srcdir/application-agisoft-dlz_${_res/x*}.png" "${pkgdir}/usr/share/icons/hicolor/${_res}/mimetypes/application-agisoft-dlz.png"
85 done
86
87 # Create executables in /usr/bin
88 install -Dm755 "$srcdir/agisoft-delighter" "$pkgdir/usr/bin/agisoft-delighter"
89
90 # Set correct permission
91 chmod -R g=u "$pkgdir/opt/agisoft/${_pkgname}"
92 chmod -R o=u "$pkgdir/opt/agisoft/${_pkgname}"
93 chmod -R g-w "$pkgdir/opt/agisoft/${_pkgname}"
94 chmod -R o-w "$pkgdir/opt/agisoft/${_pkgname}"
95 chmod -R g=u "$pkgdir/usr/share/licenses/$pkgname/licenses"
96 chmod -R o=u "$pkgdir/usr/share/licenses/$pkgname/licenses"
97 chmod -R g-w "$pkgdir/usr/share/licenses/$pkgname/licenses"
98 chmod -R o-w "$pkgdir/usr/share/licenses/$pkgname/licenses"
99}
100

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion